Privacy policy

Last updated: 31 October 2026

Who we are

Pelset is a service of Albretsen AS, organisation number 938 702 373, Håsteins gate 9, 5160 Laksevåg, Norway. Contact us about privacy at privacy@pelset.com.

We are the data controller for this website and for the accounts of people who use Pelset. For the content our customers handle in Pelset (support tickets, chats, attachments and the people who wrote them), the customer is the controller and we are their processor under a data processing agreement.

This website

This website sets no cookies, runs no scripts and uses no analytics. It is delivered by Cloudflare, which processes your IP address and request details to deliver the page and protect it from abuse.

Pelset accounts

When you have a Pelset account we process:

• your name, email address, language and time zone;
• sign-in data: a password hash, passkeys, two-factor settings, and, if you choose to sign in with Google or Microsoft, the account ID and email address they share with us;
• security records: sign-ins, sessions and the actions recorded in your workspace's audit log.

We use this to provide the service you signed up for (GDPR Article 6(1)(b)) and to keep it secure (Article 6(1)(f)).

Customer content

Customers will choose a data region for each workspace. Pelset is in development, and the only workspace today is our own. Its database and file storage are in the EU. Its AI model calls run in the United States, its email delivery provider keeps data in the United States, and we have not confirmed where its classification provider processes data. Before any other customer's workspace is created, these will run in the EU or be confirmed in writing.

Pelset uses AI models to categorize messages and draft replies. Anthropic's commercial terms do not allow training on customer content. Our classification provider has not confirmed whether it trains on content or how long it keeps it, so we make no promise about classification until it does. A human approves AI replies unless the customer turns that off, and people are told when they are dealing with an AI agent where the law requires it.

Service providers

For EU workspaces we use these sub-processors:

• Hetzner Online GmbH (Germany): servers and file storage in Germany.
• Anthropic: AI models, processed in the United States, until launch.
• An email delivery provider: sending and receiving email; keeps data in the United States.
• A classification provider: categorizing incoming messages; where it processes data is not yet confirmed.
• Cloudflare, Inc.: DNS and delivery of this website.

We name every sub-processor, with where it processes data, on request at privacy@pelset.com.

Google and Microsoft receive data only if you choose to sign in with them.

How long we keep data

• Customer content is kept as long as the customer's workspace settings say, by default while the workspace exists.
• When a workspace is deleted, its data is deleted within 30 days, and backups expire within a further 35 days.
• Audit log records are kept for at least one year.
• Account data is deleted when you delete your account.

Your rights

You can ask for access to, correction, deletion or a copy of your data, and object to or restrict how we use it. If your data is in a customer's workspace, we pass your request to that customer. You can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority where you live.

Changes

We update this page when our practices change and show the date of the last change at the top.